09/08/2025 updated
100 % available
SOC Analyst with Cybersecurity and Incident Response Expertise
Pakistan
Worldwide
Master of Science (Computer Network and Security)ResearchAutomationComputer SecurityDigital ForensicsIncident ResponseIntrusion Detection SystemsPython (Programming Language)Network SecurityWindows PowerShellRequirements AnalysisReverse EngineeringSecurity Information and Event ManagementSquid (Proxy Server)StreamlineWireshark
Cybersecurity Incident Response
Advanced incident response operations including scoping, containment, eradication, and recovery of sophisticated cyber threats. Digital forensics and reverse engineering of malware to identify attacker persistence techniques.
SIEM Implementation & Management
Expertise with multiple SIEM platforms including IBM QRadar, Microsoft Sentinel, Splunk, and Elastic SIEM. Development of correlation rules, advanced KQL queries, and automation playbooks to reduce mean time to respond.
Threat Hunting & Detection Engineering
Detection Engineering (DET) use cases mapped to MITRE ATT&CK framework. Proactive threat hunting campaigns across endpoints, networks, and cloud platforms to detect hidden adversary activity.
EDR/XDR Tools
Proficiency with Carbon Black, CrowdStrike Falcon, and Microsoft Defender for Endpoint for endpoint detection and response capabilities.
Automation & Scripting
Development of automation using Microsoft Sentinel Playbooks, Python, and PowerShell scripting to streamline investigations and boost analyst efficiency.
Network & Security Tools
Experience with Wireshark, IDS/IPS, Palo Alto, FortiGate, and Squid Proxy for network security monitoring and analysis.
Malware Analysis
Malware analysis using Cuckoo Sandbox, Volatility, and Memory & Disk Forensics techniques to investigate infections and unauthorized access attempts.
Advanced incident response operations including scoping, containment, eradication, and recovery of sophisticated cyber threats. Digital forensics and reverse engineering of malware to identify attacker persistence techniques.
SIEM Implementation & Management
Expertise with multiple SIEM platforms including IBM QRadar, Microsoft Sentinel, Splunk, and Elastic SIEM. Development of correlation rules, advanced KQL queries, and automation playbooks to reduce mean time to respond.
Threat Hunting & Detection Engineering
Detection Engineering (DET) use cases mapped to MITRE ATT&CK framework. Proactive threat hunting campaigns across endpoints, networks, and cloud platforms to detect hidden adversary activity.
EDR/XDR Tools
Proficiency with Carbon Black, CrowdStrike Falcon, and Microsoft Defender for Endpoint for endpoint detection and response capabilities.
Automation & Scripting
Development of automation using Microsoft Sentinel Playbooks, Python, and PowerShell scripting to streamline investigations and boost analyst efficiency.
Network & Security Tools
Experience with Wireshark, IDS/IPS, Palo Alto, FortiGate, and Squid Proxy for network security monitoring and analysis.
Malware Analysis
Malware analysis using Cuckoo Sandbox, Volatility, and Memory & Disk Forensics techniques to investigate infections and unauthorized access attempts.
Experience
Professional experience5 - 10 years
Freelancer since2025
Languages
EnglishFluent
Project history
Leading advanced incident response operations, performing digital forensics, implementing detection engineering use cases, developing correlation rules, executing threat hunting campaigns, optimizing SOC workflows, and integrating threat intelligence platforms into SIEM workflows.
Monitored and investigated security events using IBM QRadar SIEM, conducted in-depth investigations with Carbon Black EDR, performed incident triage and escalation, optimized correlation rules, and assisted in incident response activities.
Certificates
CISM
Isaca2025
Falcon responder
Crowdstrike2025
Security operation Analyst SC-200
Microsoft2024
Microsoft architect expert
Microsoft2024
Crowdstrike falcon administrator
Crowdstrike2024